News
Medical Data Rx Breach: The Gentlemen/VYPR Ransomware Group Claims Attack on Michigan Healthcare IT Vendor; Class Action Investigation Launched · Data BreachMid Florida Dermatology & Plastic Surgery Discloses Breach Affecting 85,585 Patients; Kannarr Eye Care and Indiana University Health Also Report Incidents · Data BreachCentral Ohio Primary Care Physicians Discloses Vishing-Triggered Breach Affecting 1.4 Million Patients and Employees; 'Chaos' Ransomware Group Implicated · Data BreachIvanti Connect Secure Zero-Day Exploited in Active Attacks Targeting Healthcare VPN Infrastructure · Data BreachMetaencryptor Ransomware Group Claims Attack on MyMichigan Health, University of Michigan-Affiliated 26-County Healthcare System · Data BreachPhoton Health, Healthcare Highways, and Any-Time Home Care Disclose Data Breaches; Direwolf Ransomware Group Claims Attack on Photon Health · Data BreachOracle Health / Cerner Breach Tally Climbs to Nearly 20 Million — Far Exceeding Earlier Disclosures · Data BreachSaber Healthcare and Law Firm Buchalter Disclose Patient Data Breaches; Bright Smile Dental Hit by Ransomware · Data BreachDC Medicaid Agency (DHCF) Notifies 399,086 Beneficiaries After Three-Year Online Data Exposure Added to HHS Breach Portal · Data BreachPharmacy Benefit Manager MedImpact Healthcare Systems Begins Notifying Patients of October 2025 Network Intrusion; Healthcare Software Firm Rosch Visionary Systems Also Discloses Breach · Data BreachMedical Data Rx Breach: The Gentlemen/VYPR Ransomware Group Claims Attack on Michigan Healthcare IT Vendor; Class Action Investigation Launched · Data BreachMid Florida Dermatology & Plastic Surgery Discloses Breach Affecting 85,585 Patients; Kannarr Eye Care and Indiana University Health Also Report Incidents · Data BreachCentral Ohio Primary Care Physicians Discloses Vishing-Triggered Breach Affecting 1.4 Million Patients and Employees; 'Chaos' Ransomware Group Implicated · Data BreachIvanti Connect Secure Zero-Day Exploited in Active Attacks Targeting Healthcare VPN Infrastructure · Data BreachMetaencryptor Ransomware Group Claims Attack on MyMichigan Health, University of Michigan-Affiliated 26-County Healthcare System · Data BreachPhoton Health, Healthcare Highways, and Any-Time Home Care Disclose Data Breaches; Direwolf Ransomware Group Claims Attack on Photon Health · Data BreachOracle Health / Cerner Breach Tally Climbs to Nearly 20 Million — Far Exceeding Earlier Disclosures · Data BreachSaber Healthcare and Law Firm Buchalter Disclose Patient Data Breaches; Bright Smile Dental Hit by Ransomware · Data BreachDC Medicaid Agency (DHCF) Notifies 399,086 Beneficiaries After Three-Year Online Data Exposure Added to HHS Breach Portal · Data BreachPharmacy Benefit Manager MedImpact Healthcare Systems Begins Notifying Patients of October 2025 Network Intrusion; Healthcare Software Firm Rosch Visionary Systems Also Discloses Breach · Data Breach
Beginnerfront deskpractice managerprovidervendor

Your HIPAA basics checklist

How to use medcomply.ai's plain-English checklist to see gaps before they become investigations.

TL;DR

Use the interactive checklist to track training, BAAs, workstations, and more. Progress saves in your browser so you can work through it over time.

Updated 2026-04-21

This short article pairs with our interactive HIPAA checklist, a practical way to see whether your basics are covered.

Why a checklist helps

Compliance is not one big project you finish once. It is a set of promises your practice makes to patients and regulators: we train people, we lock systems, we have BAAs, we respond when things break.

The checklist turns those promises into yes/no questions you can actually answer.

How to use it

  1. Open the full checklist.
  2. Choose your role filter if you want a shorter list.
  3. Check items off as you verify them, saves on this device.
  4. Use PDF export before a leadership meeting or share a link with your team.

What to do with gaps

Do not hide them. Prioritize essentials first, Notice of Privacy Practices, training, workstation locks, BAAs for vendors with PHI, and a named privacy official for covered entities.

Then schedule make-up tasks like risk assessments and policy updates.

Not legal advice. Educational overview only; consult qualified counsel for your situation.